skysight-inc/HackerNews huggingface dataset:
My wife has been receiving medical appointments, test results, event tickets, package tracking numbers and so on destined to a few old ladies for years.
I once tracked the sons and nephews of one and told them, and they apparently thought I was some kind of scammer and didn't return messages after a couple exchanges, so to this day she still receives all those.
Your first sentence took me a second to mentally parse and understand, so to help anyone with that same issue later, what was meant is:

> That's why I've updated my SMTP config to handle the hyphen character the same way as the plus sign over 10 years ago.
> Because Tesla isn't owned and controlled by a foreign government and military rival.

Musk going into bed with AfD puts him on an “adversary radar” for me, an immigrant in Germany. So hold your horses. US is cool until it isn’t. Political goals decide who US likes and this can change from one election to another.
“M1 Computers have built-in terrible spyware that cannot be removed (Apple made sure of this).”

Can you say more about this?
Sounds promising!
I am impressed how deeply you processed your books. UI also looks great.
Hope you'll get more and more users
Import and export of passkeys is coming "soon" to 1Password (as of October): https://blog.1password.com/fido-alliance-import-export-passk...

I think some vendors do have intentions of locking in users with passkeys (*cough* Apple *cough*), but I also think it's also not the only explanation for why import and export isn't supported by most managers.

A more charitable explanation would be that since passkeys are 'new', there's less people demanding import/export since they have very few passkeys to move around, and at least some vendors wanted to take time to develop a good solution for it / focus resources on actually getting the daily usage of passkeys working.
Why are you comparing EU against an economy that also has a common currency that cannot be manipulated by member states?
LimeWire: Upload, edit and share files of any size
Good to know, thanks! But I might not have the other device on me at all times.
If you’re buying and implementing a HSM, you really ought to understand this concept. After all, you’re getting paid to.

I do not expect random consumers to understand this concept. It’s grossly irresponsible and is simply user abuse.

I love Passkeys. They’re fantastic. I do not love how unportable the implementations for Average Joe and Jane are.
Lague's videos have been consistently incredible and inspiring. Highly recommend for anyone interested in the space
For a discussion on this see:

https://dothemath.ucsd.edu/2012/04/economist-meets-physicist...

Isaac Asimov wrote a short story which touches on this (basically the last zookeeper/pet owner is confronted with the requirement that his ménagerie be exterminated) and also did some calculations --- if the earth's crust were converted to biomass, there would be a limiting element if memory serves, phosphorous.
> Letting files be poll/select/epoll'd isn't free either.

Yes, but those slashes are showing the lie in the statement. Letting files be polled/selected isn't "free", but it's standard. The poll() method has been in struct file_operations for literally decades[1]. Adding "epoll support" requires no meaningful changes to the API, for any device that ever supported select().

That kind of evolutionary flexibility (the opposite of "technical debt") is generally regarded as good design. And it's something that epoll had designed in and something that queue lacks, having decided to go its own way. And it's not unreasonable to call that out, IMHO.

[1] It's present in commit 1da177e4c3f4 ("Linux-2.6.12-rc2"), which is the very first git commit. I know people maintain archives of older trees, but I'm too lazy to dig. Suffice it to say that epoll relies on an interface that is likely older than many of the driver developers using it.
It's both. Most of those vendors have ways to backup those keys securely to same vendor backup product. But they won't let you export them via a wrap or whatever.

It functions both as a security feature and a vendor lock in.
> (As I understand it, we _kinda_ ran out of conventional oil, but were able to replace it with shale oil et al... so it's unclear [1])

That doesn't really change the math. It is a finite resource, the amount consumed keeps going up. There has to be a peak. Growth tends to be to a logarithmic or exponential curve, so adding a huge amount of extra resource doesn't change the date all that much on long timeframes.
I was writing from a US-aligned perspective. If you view the US as a hostile power, then yes the same - to some degree - applies to Tesla. Although I think they're not as good at covering their tracks for something like that.
EU citizens do have a special status for work and stay in Switzerland that is barely more strict than moving within EU.
Winlator will still be the best option in the near future but the community has been really wanting alternatives since Winlator isn't fully open source. The lead dev develops outside of the repo and appears every few months with an update, but never released the source code for the newest version (8.0)

Now the community is split into multiple forks of version 7.1 in order to add new features & fixes, like Winlator Frost and coffincolors' fork. It's hampering progress and makes the scene very confusing to navigate, so we're rooting for a neater alternative, whether that's MiceWine or whatever else is coming up.
Looking really good, love how fast website is and UX looking friendly as well. Upvoting!
Show HN: UseSimpleCamera – A simple way to handle camera and audio with react
Based on what I've seen, most command-line clients and basic HTTP libraries typically ship with leaner, more static configurations (e.g., no GREASE extensions in the Client Hello, limited protocols in the ALPN extension header, smaller number of Signature Algorithms). Mirroring real browser TLS fingerprints is also more difficult due to the randomization of the Client Hello parameters (e.g., current versions of Chrome)
I worked at a small company experimenting with RAG.

We used neo4j as the graph database and used the LLM to generate parts of the spark queries.
I believe that, their brand “ChatGPT” is the moat. Here in EU, every news media and random strangers on the streets who don’t understand anything beyond TikTok also knows that AI=ChatGPT. The term is so ubiquitous with AI that, I am willing to bet when someone tells someone else about AI, they tell ChatGPT and the new person will search and use ChatGPT without any knowledge of Claude/Gemini/LLama et. al. This is the same phenomenon as web search is now = Google, despite other prominent ones existing.

The competitions are mostly too narrow(programming/workflow/translation etc) and not interesting.
Not at all. I really like constructive criticism of HN, may be the way I wrote it came off as insincere to some but I credit even the memes I share on social media.
The protocols are flexible and most browsers bring their own HTTP+TLS clients
The same author also makes a Python binding of this which exposes a requests-like API in Python, very helpful for making HTTP reqs without the overhead of running an entire browser stack: https://github.com/lexiforest/curl_cffi

I can't help but feel like these are the dying breaths of the open Internet though. All the megacorps (Google, Microsoft, Apple, CloudFlare, et al) are doing their damndest to make sure everyone is only using software approved by them, and to ensure that they can identify you. From multiple angles too (security, bots, DDoS, etc.), and it's not just limited to browsers either.

End goal seems to be: prove your identity to the megacorps so they can track everything you do and also ensure you are only doing things they approve of. I think the security arguments are just convenient rationalizations in service of this goal.
Happy solstices and merry perihelions to all!

If anyone's celebrations urgently need very precise planetary orbital state vectors, for some reason, you can look up current and future ones here:

https://ssd.jpl.nasa.gov/horizons/
You're projecting California onto the entire country. Many states thad mandate 50-state compliance for new sales stop caring after and most of them only do a plug in test anyway. Many states don't test at all.

Vehicle mods exist in the same sort of patchwork of "illegal to various degrees but nobody cares" gray areas that weed does.

At the end of the day enforcement is capped by political will.
>Technical folks might. Non-technical folks fall for this kind of thing

Right, but at that point we're just talking about general functional literacy. These same people are going to have trouble logging into their bank from a different computer, or ordering from a Wendy's menu or getting an oil change. Most people don't, and they sign up and post their memes, and follow their people, the platform reaches is critical mass and the world keeps on turning.
COVID certainly buggered up things. Thanks for the correction.
"Sols, the lion" is all I'm getting out of my mind meat :(
That is why I have qualified "cultures" with "that had ...", a condition that can be true only for the cultures with solar calendars or mixed solar-lunar calendars.
Show HN: Generate design and get code for your mobile app ideas with only prompt
> there isn't moderation of any kind

How can this possibly work? What if someone posts illegal content?
Hi! One of the creators of Chorus here. Really cool to hear how everyone is using it. We made this as an experiment because it felt silly to constantly be switching between the ChatGPT, Claude, and LMStudio desktop app. It's also nice to be able to run models with custom system prompts in one place (I have Claude with a summary of how CBT works that I find pretty helpful).

It's a Tauri 2.0 desktop app (not Electron!), so it is using the Mac's native browser view and a Rust backend. It also makes DMG size relatively small (~25mb but we can get it much smaller once we get rid of some bloat).

Right now Chorus is proxying API calls to our server, so it's free to use. We didn't add bring-your-own-api key to this version because it was a bit quicker to ship. This was kind of an experimental winter break project, so didn't think too hard about it. Likely will have to fix that (and add bring your own key? or a paid version?) as more of you use it :)

Definitely planning on adding support for local models too. Happy to answer any other questions, and any feedback is super helpful (and motivating!) for us.

UPDATE: Just added the option to bring your own API keys! It should be rolling out over the next hour or so.
I wonder what would happen if we purposely start polluting the training data? It may be too late for older technology but technology is always changing. If this is a way for me to protect my job and increase my value I actually consider doing this.
Hopefully Sizewell C will get off the ground soon.
How AI is unlocking ancient texts
They use different SSL libraries/configuration. Chrome uses BoringSSL and other libraries may use OpenSSL or some other library.
Besides that the SSL library may be configured with different cipher suites and extensions. The solution these impersonators provide is to use the same SSL library and configuration as a real browser.
nit: All wide lenses also capture a "telephoto" image in the center. The only thing a telephoto lens does is to spread that image out over the whole sensor.

Maybe their lens is variable focal length, providing more magnification in the center at a presumed cost of clarity.
How to Think, Say, or Do Precisely the Worst Thing for Any Occasion (2009)
> Rust’s raw pointer types are nullable by default and have no null-pointer dereference checking. There is a NonNull<T> pointer type that gives you more safety. I’m not sure why it’s not the default, since Rust’s references are non-nullable.

NonNull<T> would probably be a better default indeed, but one reason might be that NonNull<T> has more UB than *mut T (namely, it is UB for it to be the null pointer).

(A lot of the text is about how more UB makes unsafe programming harder, which is a fair point)

> Zig pointers, by default, are non-null and you opt-in to nullability using the ? syntax (e.g. ?*Value). And of course, you get null pointer dereference checking enabled by default too.

Well so Zig pointers, by default, has more UB than Rust pointers, at least when concerning null pointers.
I always wonder, how do you debug which such a setup?
This comment and an idea to work backwards deserve an article!

Just finished a call a few mins, and we came to conclusion we do natural query language, BM25 scoring with Tantivy based code first

https://github.com/quickwit-oss/tantivy

In meanwhile we collect all questions to ask LLM so we can be more consious at Hybrid Search implementation phase
I think it will be led dramatic than that. It simply won’t work and there will be another developer hiring spree to hire people into data engineering positions where they build large data processing pipelines to make training wheels or guard rails for LLMs to justify the investment.
I completely agree that was an attempted decapitation strike, but where we may disagree is that I don't think they were banking on it succeeding - but it was rather just a high risk, high reward play. For instance they also tried something similar in the first Chechen War, and it failed there as well.

But in this case I'd emphasize that even if that was successful they would have known it would be far from the end of the war. The 'nationalist units' and at least some regular forces would resist, the West would predictably back them endlessly (and probably bring in proxy forces) and the most likely scenario (absent a quick settlement) would be something like Afghanistan 2.0.
not sure if this is addressing my question. as i understand it the RAG augments the knowledge base by representing its content as a graph. but this graph representation needs to be linguistically represented such that an llm can digest it by tokenizing and embedding.
> All their other “products” are just suction pipes for hoovering up that data.

I don't think that's true for their VR/MR hardware. That's Meta's attempt to get a product that is _not_ like that, but which instead gets them in a position similar to where Google and Apple are for phones. I.e., where they own the platform and can profit off of that.
Compared to what? X? The platform that doesn't even allow "cisgender" to be posted without a post getting demoted?
The point of the article is that they are not actually better than passwords in a lot of ways that people actually want them to be better.
I'm a techie with a Fortune 10, and have helped on the recruiting side of the house. I've been told very clearly, with slideshows confirming, that non-DEI applicants need not apply. There's <10% hiring quota that they could fit. All our new hires without an incredibly strong in-team reference are H1B people who are incredibly incompetent.
That's not a terrible idea for high-value assets.

There are already national registries of land, residential/commercial buildings and most types of vehicle. Business ownership and shareholding is also a matter of public record in most territories.

And while there may not be a national requirement for registries of other classes of high-value financial asset, you can bet the banks know, and above a certain size, $100k or so, I can't see the down-side relative to what's already legally mandated. (By all means argue for "total privacy", but this is not what the law has decided on in most places - that ship sailed long ago.)
Legislation. They are required to gather that data. The keyword to start with C-ITS.
KeePassXC imports passkeys from Bitwarden: https://github.com/keepassxreboot/keepassxc/pull/11401/files
That Dailydot article is from November 14 2024 and says those were fake accounts.

But apparently she really did create an account, yesterday, and says to have been immediately banned, without posting anything: https://x.com/LauraLoomer/status/1873542021715243076
I feel like retro is already in
Thanks! Right now Chorus is proxying API calls to our server so it's free. This was kind of an experimental winter break project that we were using internally, and it was quicker to ship this way.

Likely going to add bring your own API keys (or a paid version) soon.

Update: just added option to bring your own keys! Should be available within an hour.
An individual Gazan, or Gazans as a people? Before the war, many western countries took in Palestinians so that was a way for individuals to opt out.

Anyhow, the answer right now is fight back. Stop hiding hostages (assuming any are still alive), stop supporting family members who are terrorists, kick them out of your neighbourhood and grab a gun and fight back. Presumably the terrorists are outnumbered by those who aren't terrorists...
Ask HN: What's Your Morning Routine?
recently got let go, and am trying to stay focused and productive despite all the unstructured time.

starting the day off with a constructive morning routine seems necessary right now.

what's your morning routine? does it work for you?
Counterpoint: Youtuber AlphaPhoenix does a very good job explaining electricity using the hydraulic analogy
https://www.youtube.com/watch?v=X_crwFuPht4
The Cognitive Style of PowerPoint (2006) [pdf]
A simple way to explore data through a Tableau-like UI directly in your data app
It had a lot more to do with changes that were already in progress. The soviet union hadn’t been able to care for its citizens for a while. Most tellingly, life expectancy had been declining. In the late 70s/early 80/ there were elements within the us government strongly arguing, based on this and other data, that the USSR would collapse within a decade, but the cold warriors laughed at them.
I solve this by creating two passkeys for each account, for iOS and Chrome. This covers all the devices I might use to log in and there’s no single point of failure.
Sorry, I was wrong. Indonesia.
It’s quite obvious that an incredibly small sample, hand chosen, will be biased.
It had a lot more to do with changes that were already in progress. The soviet union hadn’t been able to care for its citizens for a while. Most tellingly, life expectancy had been declining. In the late 70s/early 80s there were elements within the us government strongly arguing, based on this and other data, that the USSR would collapse within a decade, but the cold warriors laughed at them.
What is the core of the problem?

Is it that when you have two colors like RGB(0,0,255) and RGB(255,255,0) there is no easy formula to calculate what a mix of these two colors would look like in the real world?

And therefore one needs a lookup table? And since 16Mx16M is a large number, a complete lookup table is impractical?
I'm not sure, every such task work as a distraction. Like "what music should I listen to? Oh hey, maybe this band has a new album...." and from there I would be distracted....like finding new album, but also find some other interesting band, google that band, watch live concert, then find another interesting video and so on.

Its kind of the old scheme....in order to work productive I have to first clean the house vs. In order to work productive (=focus) I first need to find music. It's not done with one song right....it needs a playlist, but some music is on Spotify, some only on YouTube, maybe I need to first look for a tool which plays both....

I'm glad that people find tools to help with their procrastination, but it's not for everyone (sadly).
ahah true, but in this case, we're (melty) just paying right now. I wanted to make it really easy to try and didn't implement bring your own keys yet. I probably should ask O1 to fix that
Which companies have actually succeeded at becoming a profitable and break-even human-less $ESTABLISHED_INDUSTRY?
For industrial plant white papers, a common practice is to submit your company email address and name as part of the access process.
It isn't dead in any meaningful way. Every time there's an issue with a service (Musk writes something obnoxious, 2 day outage, rules change) people create accounts on competing services, but are back within a week because those places don't have content or engagement. Some people do migrate, and it's possible to get the impression that Twitter is dead if this happens to your social circle, but to me it seems as active as ever.
We'll see how easy it gets to get them when Magnus is playing at some parallel tournament, though. Nakamura, for instance, has already made a point about that.
As an aside Meadow's primer Thinking in Systems[1] should be a required text in middle/high schools (imho).

Donella Meadows died of cerebral meningitis at the age of 59 in 2001[2], I truly wish she was someone we could be hearing from today.

[1] https://wtf.tw/ref/meadows.pdf

[2] https://en.wikipedia.org/wiki/Donella_Meadows
Anyone know what adoption rates for passkey looks like now? I think they are cool too, but the constant prompting to create them and invisible/variable UI everywhere is a problem. It presents as inconsistent as compared with the standardized username/password form that grandmas understand.
Thanks for the feedback! I haven't tried to do this yet, but it's built on Tauri 2.0 and it looks not too hard (https://tauri.app/distribute/app-store/). Will take a look at this
Yet, the statesmen often try to ban non botnet cars
Is conversation data really that valuable?

If I have the LLM translate a text from French to English... what is there to learn from that? Maybe the translation is great maybe it's awful, but there's no "correct" translation to evaluate the LLM against to improve it.

If I ask the chatbot for working code and it can't provide it, again, there's no "correct" code to train it against found in the conversation.

If I ask an LLM to interpret a bible passage, whether it does a good job or a terrible job there's no "correct" answer that the provider has to use as the gold standard, just the noise of people chatting with arbitrary answers.
Part of the problem is that the governments have grown so big they can't do this without pissing off their own stake holders.

If you float the idea of clamping down on the privacy violations of one thing in some sector of the economy you'll have the existing big players and the regulatory agency they're in bed with instantly complaining that they "need" these things in order to satisfy the regulators demands for records and paper pushing.

Imagine if there was a push to force cars back to the degree of connectivity they had in 2004. The EPA, the NHTSA, the big OEMS, they'd all be up in arms because they've gotten so used to all the number crunching make-work they've created for themselves over the past 20yr.
That doesn't solve anything. You just have twice as many problems now.
One of the primary, explicit design goals of webauthn is that they're not phishable. Passwords are phishable.

What are the other ways that people want passkeys to be better?
To answer your question directly: EVs aren't more expensive to service than ICE vehicles. If you piece together the quotes from various high level Hertz people, the problem is just that repair costs for accidents for Teslas are around 2x the cost for other comparable cars. And the reason for that is largely that Tesla doesn't have the large parts and repairs network that the traditional dealers have.

>According to Johann Rawlinson, Hertz VP of Investor Relations, "collision and damage repairs on an EV can often run about twice that associated with a comparable combustion engine vehicle."

>In fact, according to Stephen Scherr, Hertz's CEO, "there's quite a bit of the cost element that relates to the Teslas as opposed to others." Scherr pointed to GM's EVs, which benefit from a larger parts and repair network nationally and lower parts and labor costs for repairs. Note that a full 80 percent of Hertz's EV fleet is Tesla models.

https://www.motortrend.com/news/hertz-ev-fleet-sale-tesla-re...